# Vulnerabilities published in 2025


- [MAL-2025-48616](https://insights.sbomify.com/MAL-2025-48616/): Malicious code in cdc-apache-cassandra (npm) (malicious package)
- [MAL-2025-48615](https://insights.sbomify.com/MAL-2025-48615/): Malicious code in binance-connector-js (npm) (malicious package)
- [MAL-2025-48614](https://insights.sbomify.com/MAL-2025-48614/): Malicious code in astra-db-chatbot-starter (npm) (malicious package)
- [MAL-2025-48613](https://insights.sbomify.com/MAL-2025-48613/): Malicious code in ark-experience (npm) (malicious package)
- [MAL-2025-48612](https://insights.sbomify.com/MAL-2025-48612/): Malicious code in ajna-rewards-snapshot (npm) (malicious package)
- [MAL-2025-48611](https://insights.sbomify.com/MAL-2025-48611/): Malicious code in @aml-ark/demo-house (npm) (malicious package)
- [MAL-2025-48610](https://insights.sbomify.com/MAL-2025-48610/): Malicious code in @aml-ark/ark-experience-byteplus (npm) (malicious package)
- [MAL-2025-4861](https://insights.sbomify.com/MAL-2025-4861/): Malicious code in openssl-pkcs11 (npm) (malicious package)
- [MAL-2025-48609](https://insights.sbomify.com/MAL-2025-48609/): Malicious code in ember-simplepractice (npm) (malicious package)
- [MAL-2025-48608](https://insights.sbomify.com/MAL-2025-48608/): Malicious code in jquery-ui-source (npm) (malicious package)
- [MAL-2025-48607](https://insights.sbomify.com/MAL-2025-48607/): Malicious code in gear-bridge-common (npm) (malicious package)
- [MAL-2025-48606](https://insights.sbomify.com/MAL-2025-48606/): Malicious code in gear-js-util (npm) (malicious package)
- [MAL-2025-48605](https://insights.sbomify.com/MAL-2025-48605/): Malicious code in near-abi-client-js (npm) (malicious package)
- [MAL-2025-48604](https://insights.sbomify.com/MAL-2025-48604/): Malicious code in faustjs-org-sitemm2 (npm) (malicious package)
- [MAL-2025-48603](https://insights.sbomify.com/MAL-2025-48603/): Malicious code in orderbook-sdk (npm) (malicious package)
- [MAL-2025-48602](https://insights.sbomify.com/MAL-2025-48602/): Malicious code in orderbook-backend (npm) (malicious package)
- [MAL-2025-48601](https://insights.sbomify.com/MAL-2025-48601/): Malicious code in cooler-loans-api-get (npm) (malicious package)
- [MAL-2025-48600](https://insights.sbomify.com/MAL-2025-48600/): Malicious code in cooler-loans-api-generate (npm) (malicious package)
- [MAL-2025-4860](https://insights.sbomify.com/MAL-2025-4860/): Malicious code in opensearch-with-grafana-lambdas (npm) (malicious package)
- [MAL-2025-486](https://insights.sbomify.com/MAL-2025-486/): Malicious code in iberia-auth (npm) (malicious package)
- [MAL-2025-48599](https://insights.sbomify.com/MAL-2025-48599/): Malicious code in vite-compiler-tools (npm) (malicious package)
- [MAL-2025-48598](https://insights.sbomify.com/MAL-2025-48598/): Malicious code in tailwindcss-motionflex (npm) (malicious package)
- [MAL-2025-48597](https://insights.sbomify.com/MAL-2025-48597/): Malicious code in shadeforge (npm) (malicious package)
- [MAL-2025-48596](https://insights.sbomify.com/MAL-2025-48596/): Malicious code in react-alerts-template-basic (npm) (malicious package)
- [MAL-2025-48595](https://insights.sbomify.com/MAL-2025-48595/): Malicious code in glowmotion (npm) (malicious package)
- [MAL-2025-48594](https://insights.sbomify.com/MAL-2025-48594/): Malicious code in gamenodev21 (npm) (malicious package)
- [MAL-2025-48593](https://insights.sbomify.com/MAL-2025-48593/): Malicious code in gamenodev2 (npm) (malicious package)
- [MAL-2025-48592](https://insights.sbomify.com/MAL-2025-48592/): Malicious code in discord-utils-enhanced (npm) (malicious package)
- [MAL-2025-48591](https://insights.sbomify.com/MAL-2025-48591/): Malicious code in chalk-ipheriv (npm) (malicious package)
- [MAL-2025-48590](https://insights.sbomify.com/MAL-2025-48590/): Malicious code in baidu-tims (npm) (malicious package)
- [MAL-2025-4859](https://insights.sbomify.com/MAL-2025-4859/): Malicious code in ohhttpstubs (npm) (malicious package)
- [MAL-2025-48589](https://insights.sbomify.com/MAL-2025-48589/): Malicious code in workflows-enterprise (npm) (malicious package)
- [MAL-2025-48588](https://insights.sbomify.com/MAL-2025-48588/): Malicious code in useradm-enterprise (npm) (malicious package)
- [MAL-2025-48587](https://insights.sbomify.com/MAL-2025-48587/): Malicious code in useradm (npm) (malicious package)
- [MAL-2025-48586](https://insights.sbomify.com/MAL-2025-48586/): Malicious code in tenantadm (npm) (malicious package)
- [MAL-2025-48585](https://insights.sbomify.com/MAL-2025-48585/): Malicious code in tailwind-node (npm) (malicious package)
- [MAL-2025-48584](https://insights.sbomify.com/MAL-2025-48584/): Malicious code in tailwind-magic (npm) (malicious package)
- [MAL-2025-48583](https://insights.sbomify.com/MAL-2025-48583/): Malicious code in react-modal-select (npm) (malicious package)
- [MAL-2025-48582](https://insights.sbomify.com/MAL-2025-48582/): Malicious code in pr0f0x01 (npm) (malicious package)
- [MAL-2025-48581](https://insights.sbomify.com/MAL-2025-48581/): Malicious code in node-global-win (npm) (malicious package)
- [MAL-2025-48580](https://insights.sbomify.com/MAL-2025-48580/): Malicious code in node-get-listener (npm) (malicious package)
- [MAL-2025-4858](https://insights.sbomify.com/MAL-2025-4858/): Malicious code in office-addin-debugger (npm) (malicious package)
- [MAL-2025-48579](https://insights.sbomify.com/MAL-2025-48579/): Malicious code in mtls-ambassador (npm) (malicious package)
- [MAL-2025-48578](https://insights.sbomify.com/MAL-2025-48578/): Malicious code in mender-snapshot (npm) (malicious package)
- [MAL-2025-48577](https://insights.sbomify.com/MAL-2025-48577/): Malicious code in mender-setup (npm) (malicious package)
- [MAL-2025-48576](https://insights.sbomify.com/MAL-2025-48576/): Malicious code in mender-gateway (npm) (malicious package)
- [MAL-2025-48575](https://insights.sbomify.com/MAL-2025-48575/): Malicious code in mender-flash (npm) (malicious package)
- [MAL-2025-48574](https://insights.sbomify.com/MAL-2025-48574/): Malicious code in mender-convert (npm) (malicious package)
- [MAL-2025-48573](https://insights.sbomify.com/MAL-2025-48573/): Malicious code in mender-connect (npm) (malicious package)
- [MAL-2025-48572](https://insights.sbomify.com/MAL-2025-48572/): Malicious code in mender-configure-module (npm) (malicious package)
- [MAL-2025-48571](https://insights.sbomify.com/MAL-2025-48571/): Malicious code in mender-conductor-enterprise (npm) (malicious package)
- [MAL-2025-48570](https://insights.sbomify.com/MAL-2025-48570/): Malicious code in mender-conductor (npm) (malicious package)
- [MAL-2025-4857](https://insights.sbomify.com/MAL-2025-4857/): Malicious code in node-loggers (npm) (malicious package)
- [MAL-2025-48569](https://insights.sbomify.com/MAL-2025-48569/): Malicious code in mender-cli (npm) (malicious package)
- [MAL-2025-48568](https://insights.sbomify.com/MAL-2025-48568/): Malicious code in mender-binary-delta (npm) (malicious package)
- [MAL-2025-48567](https://insights.sbomify.com/MAL-2025-48567/): Malicious code in mender-artifact (npm) (malicious package)
- [MAL-2025-48566](https://insights.sbomify.com/MAL-2025-48566/): Malicious code in inventory-enterprise (npm) (malicious package)
- [MAL-2025-48565](https://insights.sbomify.com/MAL-2025-48565/): Malicious code in generate-delta-worker (npm) (malicious package)
- [MAL-2025-48564](https://insights.sbomify.com/MAL-2025-48564/): Malicious code in deviceconnect (npm) (malicious package)
- [MAL-2025-48563](https://insights.sbomify.com/MAL-2025-48563/): Malicious code in deviceconfig (npm) (malicious package)
- [MAL-2025-48562](https://insights.sbomify.com/MAL-2025-48562/): Malicious code in deviceauth-enterprise (npm) (malicious package)
- [MAL-2025-48561](https://insights.sbomify.com/MAL-2025-48561/): Malicious code in deployments-enterprise (npm) (malicious package)
- [MAL-2025-48560](https://insights.sbomify.com/MAL-2025-48560/): Malicious code in create-artifact-worker (npm) (malicious package)
- [MAL-2025-4856](https://insights.sbomify.com/MAL-2025-4856/): Malicious code in nextjs-insight (npm) (malicious package)
- [MAL-2025-48559](https://insights.sbomify.com/MAL-2025-48559/): Malicious code in demo-pet-store (npm) (malicious package)
- [MAL-2025-48558](https://insights.sbomify.com/MAL-2025-48558/): Malicious code in demo-mercadopago-mcp-server (npm) (malicious package)
- [MAL-2025-48557](https://insights.sbomify.com/MAL-2025-48557/): Malicious code in demo-bike-store (npm) (malicious package)
- [MAL-2025-48556](https://insights.sbomify.com/MAL-2025-48556/): Malicious code in qwant-search-extension (npm) (malicious package)
- [MAL-2025-48555](https://insights.sbomify.com/MAL-2025-48555/): Malicious code in user_oidc (npm) (malicious package)
- [MAL-2025-48554](https://insights.sbomify.com/MAL-2025-48554/): Malicious code in js-repack (npm) (malicious package)
- [MAL-2025-48553](https://insights.sbomify.com/MAL-2025-48553/): Malicious code in webpack-compilejsx (npm) (malicious package)
- [MAL-2025-48552](https://insights.sbomify.com/MAL-2025-48552/): Malicious code in tailwindcss-awesomefont (npm) (malicious package)
- [MAL-2025-48551](https://insights.sbomify.com/MAL-2025-48551/): Malicious code in react-medias (npm) (malicious package)
- [MAL-2025-48550](https://insights.sbomify.com/MAL-2025-48550/): Malicious code in doppler-secrets-fetch-github-action (npm) (malicious package)
- [MAL-2025-4855](https://insights.sbomify.com/MAL-2025-4855/): Malicious code in networkx (npm) (malicious package)
- [MAL-2025-48549](https://insights.sbomify.com/MAL-2025-48549/): Malicious code in test-all1 (npm) (malicious package)
- [MAL-2025-48548](https://insights.sbomify.com/MAL-2025-48548/): Malicious code in tchap-landing-page (npm) (malicious package)
- [MAL-2025-48547](https://insights.sbomify.com/MAL-2025-48547/): Malicious code in stopme (npm) (malicious package)
- [MAL-2025-48546](https://insights.sbomify.com/MAL-2025-48546/): Malicious code in integration-date (npm) (malicious package)
- [MAL-2025-48545](https://insights.sbomify.com/MAL-2025-48545/): Malicious code in react-prop-types-helper (npm) (malicious package)
- [MAL-2025-48544](https://insights.sbomify.com/MAL-2025-48544/): Malicious code in funny-pad (npm) (malicious package)
- [MAL-2025-48543](https://insights.sbomify.com/MAL-2025-48543/): Malicious code in artyfact-storage (npm) (malicious package)
- [MAL-2025-48542](https://insights.sbomify.com/MAL-2025-48542/): Malicious code in @jdtaro/dynamic-devtools-utils (npm) (malicious package)
- [MAL-2025-48541](https://insights.sbomify.com/MAL-2025-48541/): Malicious code in @jdei/codmi-figma-test (npm) (malicious package)
- [MAL-2025-48540](https://insights.sbomify.com/MAL-2025-48540/): Malicious code in @jd-org/clear-server (npm) (malicious package)
- [MAL-2025-4854](https://insights.sbomify.com/MAL-2025-4854/): Malicious code in ncftp (npm) (malicious package)
- [MAL-2025-48539](https://insights.sbomify.com/MAL-2025-48539/): Malicious code in zdachboostv3 (npm) (malicious package)
- [MAL-2025-48538](https://insights.sbomify.com/MAL-2025-48538/): Malicious code in webpack-css-load-branch (npm) (malicious package)
- [MAL-2025-48537](https://insights.sbomify.com/MAL-2025-48537/): Malicious code in tailwindcss-setremotion (npm) (malicious package)
- [MAL-2025-48536](https://insights.sbomify.com/MAL-2025-48536/): Malicious code in reactify-utils (npm) (malicious package)
- [MAL-2025-48535](https://insights.sbomify.com/MAL-2025-48535/): Malicious code in park-boost-v1 (npm) (malicious package)
- [MAL-2025-48534](https://insights.sbomify.com/MAL-2025-48534/): Malicious code in internallib_v808 (npm) (malicious package)
- [MAL-2025-48533](https://insights.sbomify.com/MAL-2025-48533/): Malicious code in hash-script (npm) (malicious package)
- [MAL-2025-48532](https://insights.sbomify.com/MAL-2025-48532/): Malicious code in ggtech2 (npm) (malicious package)
- [MAL-2025-48531](https://insights.sbomify.com/MAL-2025-48531/): Malicious code in ggtech (npm) (malicious package)
- [MAL-2025-48530](https://insights.sbomify.com/MAL-2025-48530/): Malicious code in bcrypt-js-edge (npm) (malicious package)
- [MAL-2025-4853](https://insights.sbomify.com/MAL-2025-4853/): Malicious code in mockup-js-plugin (npm) (malicious package)
- [MAL-2025-48529](https://insights.sbomify.com/MAL-2025-48529/): Malicious code in npmrunnode-fetch-test (npm) (malicious package)
- [MAL-2025-48528](https://insights.sbomify.com/MAL-2025-48528/): Malicious code in canary-ng (npm) (malicious package)
- [MAL-2025-48527](https://insights.sbomify.com/MAL-2025-48527/): Malicious code in mediapipe (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/574/